VULNERABILITY INTELLIGENCE
CVE-2008-2940
CVSS score7.2 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2008-08-14
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.